tooluniverse-cancer-classification

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow’s required runtime step OncoTree_search(query=...) ingests the user-provided free-text tumor description (outsider-authored relative to the agent), which is then used to query and is likely included in the agent/LLM context as part of the tool call/response handling.